Privacy Policy

Last updated: May 2026

1. What this extension does

This privacy policy applies to CloudPage Maestro, a Chrome and Firefox extension published by Aldorino Rrushi. The extension adds a panel inside Salesforce Marketing Cloud (SFMC) that helps users manage their own SFMC CloudPages assets in bulk (publish, unpublish, search, move, download, export). It only runs on SFMC domains (*.exacttarget.com, *.marketingcloudapps.com, *.sfmc-content.com) and only when the user is already signed into SFMC.

2. What data is accessed

The extension reads data from the user's own active SFMC session: landing pages, code resources, folders, asset metadata, statuses, and URLs. All API calls go to the user's own SFMC instance using the user's existing browser cookies. No data leaves the user's browser.

3. CSRF tokens

For write operations (publish, unpublish, move), SFMC requires a short-lived x-csrf-token header. The extension passively reads this header from outbound traffic the user's own SFMC tab is already sending, and stores it in chrome.storage.local for the duration of the session. The token is a session-scoped CSRF token issued by SFMC, not a credential. It cannot be used outside the user's logged-in browser. Tokens are never transmitted to any third party.

4. What data is sent off-device

None. All API requests go directly from the browser to the user's SFMC instance. The extension does not contact any server controlled by the developer. There is no analytics, no telemetry, no remote logging.

5. Local storage

chrome.storage.local is used to persist:

UI preferences (dark/light theme, panel width, panel-open state, last filter)
Short-lived CSRF tokens (as described in section 3)
5-minute enrichment cache for asset status/URL lookups

Storage is cleared when the user uninstalls the extension or clears Chrome storage manually.

6. Third-party services

None. The extension does not load remote code, does not include analytics, and does not call any developer-controlled endpoint. The only bundled third-party library is JSZip 3.10.1, included locally to build ZIP archives for the Download All feature. It runs entirely in the user's browser.

7. Children

The extension is a developer tool intended for Salesforce Marketing Cloud users. It is not directed at children.

8. Changes to this policy

This policy may be updated when extension functionality changes. The "Last updated" date will reflect material changes. The latest version is always available at this URL.

9. Contact

Aldorino Rrushi